Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7942869D21D54E1BE946085A785AA6BB7F5F7417B7EDA9AD82C7FAE9D0E6CC62/0/3138312e3232342e3139372e302f32342d3234203d3e203237393437.roa
File:                     3138312e3232342e3139372e302f32342d3234203d3e203237393437.roa (raw, json)
Hash identifier:          UARWNyoCE6O58YJU/EMB79KIpnylWQYi+AfeftKS5cE=
Subject key identifier:   20:A6:85:CA:BF:D0:2F:B3:21:E6:73:F1:9A:63:E0:07:C4:45:CD:D2
Certificate issuer:       /CN=FA42334FD8ECA11B3B3779140D2E9FB302E2E545
Certificate serial:       7FFF74C5F79DC1CA90FD80F11321B9E11D0F63D0
Authority key identifier: FA:42:33:4F:D8:EC:A1:1B:3B:37:79:14:0D:2E:9F:B3:02:E2:E5:45
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FA42334FD8ECA11B3B3779140D2E9FB302E2E545.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7942869D21D54E1BE946085A785AA6BB7F5F7417B7EDA9AD82C7FAE9D0E6CC62/0/3138312e3232342e3139372e302f32342d3234203d3e203237393437.roa
Signing time:             Tue 05 Mar 2024 18:23:17 +0000
ROA not before:           Tue 05 Mar 2024 18:18:17 +0000
ROA not after:            Tue 04 Mar 2025 18:23:17 +0000
asID:                     27947
IP address blocks:        181.224.197.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7942869D21D54E1BE946085A785AA6BB7F5F7417B7EDA9AD82C7FAE9D0E6CC62/0/FA42334FD8ECA11B3B3779140D2E9FB302E2E545.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7942869D21D54E1BE946085A785AA6BB7F5F7417B7EDA9AD82C7FAE9D0E6CC62/0/FA42334FD8ECA11B3B3779140D2E9FB302E2E545.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FA42334FD8ECA11B3B3779140D2E9FB302E2E545.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:ff:74:c5:f7:9d:c1:ca:90:fd:80:f1:13:21:b9:e1:1d:0f:63:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FA42334FD8ECA11B3B3779140D2E9FB302E2E545
        Validity
            Not Before: Mar  5 18:18:17 2024 GMT
            Not After : Mar  4 18:23:17 2025 GMT
        Subject: CN=20A685CABFD02FB321E673F19A63E007C445CDD2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:16:e6:89:67:05:c3:16:01:2b:93:cf:5d:2c:
                    55:14:21:bb:c4:a8:b1:f7:bb:28:40:e1:cd:8d:05:
                    5d:42:ad:b3:f7:ef:e2:ca:67:28:66:0a:ce:71:0f:
                    6f:fb:d6:2d:7a:27:02:38:ec:94:8a:ee:3f:e7:15:
                    f4:9a:53:51:2d:d0:ba:e2:8d:a5:bd:59:69:a4:7e:
                    18:14:19:58:0f:1c:8f:de:50:9f:8f:8e:0e:1d:e8:
                    0c:9c:8e:70:43:1e:15:35:0a:67:f9:a9:6b:99:f2:
                    81:69:c8:bd:62:97:c7:d2:71:cb:03:04:19:c1:6b:
                    61:da:0a:0e:39:ee:a8:ef:68:c6:48:ee:7a:54:3d:
                    62:48:14:a1:69:73:05:bf:8c:b4:61:aa:48:6b:59:
                    c8:41:5b:cb:e0:09:4c:c6:02:b3:53:92:4b:f5:02:
                    f5:97:7c:47:e2:10:7f:77:b6:1a:59:38:ff:bd:dc:
                    f8:5f:f5:ef:43:2b:a0:68:df:96:fe:c6:ca:2f:22:
                    e6:2b:ce:f7:2f:6c:3a:9b:91:ae:45:55:91:b7:e2:
                    36:c4:fa:25:1b:6e:c0:8d:3e:67:a3:b4:f8:6c:62:
                    70:a1:9f:9b:f3:a3:cf:e6:a9:ef:75:79:58:1a:15:
                    48:e2:54:cd:f0:3c:4d:6e:a7:4f:93:62:64:2c:a5:
                    91:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:A6:85:CA:BF:D0:2F:B3:21:E6:73:F1:9A:63:E0:07:C4:45:CD:D2
            X509v3 Authority Key Identifier:
                keyid:FA:42:33:4F:D8:EC:A1:1B:3B:37:79:14:0D:2E:9F:B3:02:E2:E5:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7942869D21D54E1BE946085A785AA6BB7F5F7417B7EDA9AD82C7FAE9D0E6CC62/0/FA42334FD8ECA11B3B3779140D2E9FB302E2E545.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FA42334FD8ECA11B3B3779140D2E9FB302E2E545.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7942869D21D54E1BE946085A785AA6BB7F5F7417B7EDA9AD82C7FAE9D0E6CC62/0/3138312e3232342e3139372e302f32342d3234203d3e203237393437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.224.197.0/24

    Signature Algorithm: sha256WithRSAEncryption
         76:4c:ff:33:29:d6:31:9d:76:ac:0b:b1:b0:c1:45:3a:64:67:
         5c:5d:80:db:aa:93:93:4e:d6:26:2e:94:17:7c:21:b5:a8:ab:
         7a:0c:d0:9c:77:90:36:2a:94:ab:1e:97:31:9b:7b:fc:4a:17:
         92:9a:49:db:1b:cf:1b:1a:e8:a2:1c:7c:b6:de:36:83:a7:13:
         8e:55:5b:c1:5a:25:1c:a6:12:dd:48:f2:63:6a:c4:e9:0c:8d:
         da:17:1a:b6:c1:78:01:83:9b:e6:14:57:72:5f:3f:8b:49:30:
         07:48:fc:e3:4b:b1:23:15:38:e4:3d:3b:ad:53:4f:f2:bb:e9:
         0d:4f:27:c1:08:51:03:52:d5:da:3d:bc:04:cc:70:b9:4d:3d:
         96:8a:02:43:65:cc:cc:bd:c6:1d:e2:7c:f4:9a:b2:85:17:5c:
         c8:d4:9b:fd:8c:80:a1:f3:b0:7a:90:0b:ae:c8:66:c3:00:44:
         a0:96:c5:91:c1:53:88:83:10:1a:32:b1:12:55:ba:07:b9:90:
         b7:25:f0:d0:06:02:31:1f:65:be:1b:1d:ca:f6:8c:70:a9:96:
         26:a4:0d:d1:3d:13:7c:c0:a5:41:c6:49:af:24:9e:f2:17:93:
         e3:90:5d:40:1d:19:15:d6:10:70:8e:ca:b1:9a:b8:69:42:a2:
         71:5a:fa:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 10:24:15 2024 by rpki-client on console-fra.rpki-client.org